2
0
mirror of https://gitlab.isc.org/isc-projects/bind9 synced 2025-09-05 09:05:40 +00:00

suggested alternate test for TSIG signature

feel free to remove this commit if you prefer the other method.
This commit is contained in:
Evan Hunt
2019-01-29 11:56:17 -08:00
parent 4754fa2ded
commit 0010f73cde

View File

@@ -40,7 +40,7 @@ EOF
}
# Weak verification that TKEY response is signed.
grep "flags: qr; QUESTION: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1" nsupdate.out${num} > /dev/null || {
grep "TSIG PSEUDOSECTION" nsupdate.out${num} > /dev/null || {
echo "I:bad tkey response (not tsig signed)"
return 1
}